centos7.4 ftp服务器搭建

Posted 2020-11-21

1. 安装ftp服务器

[[email protected] ~]# yum -y install vsftpd

2. 配置 ftp配置文件

[[email protected] ~]# cd /etc/vsftpd/

[[email protected] vsftpd]# cp vsftpd.conf vsftpd.conf.bak

[[email protected] vsftpd]# sed -i "s/anonymous_enable=YES/anonymous_enable=NO/g" '/etc/vsftpd/vsftpd.conf'

[[email protected] vsftpd]# sed -i "s/#anon_upload_enable=YES/anon_upload_enable=NO/g" '/etc/vsftpd/vsftpd.conf'

[[email protected] vsftpd]# sed -i "s/#anon_mkdir_write_enable=YES/anon_mkdir_write_enable=YES/g" '/etc/vsftpd/vsftpd.conf'

[[email protected] vsftpd]#

[[email protected] vsftpd]# sed -i "s/#chown_uploads=YES/chown_uploads=NO/g" '/etc/vsftpd/vsftpd.conf'

[[email protected] vsftpd]# sed -i "s/#async_abor_enable=YES/async_abor_enable=YES/g" '/etc/vsftpd/vsftpd.conf'

[[email protected] vsftpd]# sed -i "s/#ascii_upload_enable=YES/ascii_upload_enable=YES/g"   /etc/vsftpd/vsftpd.conf'

[[email protected] vsftpd]# vim vsftpd.conf

...  添加到末尾

local_root=/home/vsftpd/CCCC/

write_enable=YES

anon_world_readable_only=NO

anon_upload_enable=YES

anon_mkdir_write_enable=YES

anon_other_write_enable=YES

3. 建立用户文件

[[email protected] vsftpd]# vim virtusers    上面用户，下边密码,自定义

CCCC

123123

4. 生成用户数据文件

[[email protected] vsftpd]# db_load -T -t hash -f /etc/vsftpd/virtusers virtusers.db

[[email protected] vsftpd]# chmod 600 /etc/vsftpd/virtusers.db

5. 修改安全认证文件

[[email protected] ~]# cd /etc/pam.d/

[[email protected] pam.d]# vim vsftpd   注释掉全部，添加两行

...

auth sufficient /lib64/security/pam_userdb.so db=/etc/vsftpd/virtusers

account sufficient /lib64/security/pam_userdb.so db=/etc/vsftpd/virtusers

6. 新建系统用户

[[email protected] ~]# useradd vsftpd -d /home/vsftpd -s /bin/false

[[email protected] ~]# chown -R vsftpd:vsftpd /home/vsftpd

7. 建立虚拟用户个人配置文件

[[email protected] ~]# mkdir /etc/vsftpd/vconf

[[email protected] ~]# cd /etc/vsftpd/vconf/

[[email protected] vconf]# touch CCCC

[[email protected] vconf]# vim CCCC

local_root=/home/vsftpd/CCCC/

write_enable=YES

anon_world_readable_only=NO

anon_upload_enable=YES

anon_mkdir_write_enable=YES

anon_other_write_enable=YES

[[email protected] ~]# chown -R vsftpd:vsftpd /home/vsftpd/

[[email protected] ~]# chmod -R 700 /home/vsftpd/

8. 防火墙

[[email protected] vconf]# systemctl start firewalld.service

[[email protected] vconf]# firewall-cmd --zone=public --add-port=21/tcp --permanent

success

[[email protected] vconf]# firewall-cmd --zone=public --add-port=10060-10090/tcp --permanent

success

[[email protected] vconf]# firewall-cmd --reload

success